Enum SessionInvalidationReason 

pub enum SessionInvalidationReason {
    Logout,
    Expired,
    UserRequested,
    AdministrativeRevoke,
    PasswordReset,
    PasswordResetByOther,
    MfaEnabled,
    MfaDisabled,
    MfaDisabledByOther,
    AuthorityEscalation,
    EmergencyRecovery,
    RoleChangedByOther,
    TrustEscalation,
}

Why a session is being invalidated. Drives both the audit action_type and decisions about whether to clear remembered MFA or mint a replacement session.

All invalidate_sessions callers pass one of these — the engine is the single writer of revoked_at. Free-form reasons are not allowed; doctrine 22 (“centralized invalidation”) in DESIGN_SYSTEM.md.

Variants

Logout

Expired

UserRequested

AdministrativeRevoke

PasswordReset

PasswordResetByOther

MfaEnabled

MfaDisabled

MfaDisabledByOther

AuthorityEscalation

EmergencyRecovery

RoleChangedByOther

A user’s role was changed by another actor (R2 admin role edit, or R4 CLI rustio-admin user promote). The target’s existing sessions still authorise the pre-change tier; revoking them forces a fresh login that picks up the new authority. R4 commit #7 wires emission; see DESIGN_R4_EMERGENCY.md §7.

TrustEscalation

Token rotation that accompanies a trust escalation (Authenticated → Elevated, etc.). The replacement session is minted as the parent’s child; this revokes the old token.

Implementations

impl SessionInvalidationReason

pub const fn as_str(self) -> &'static str

Stable lowercase identifier persisted in rustio_sessions.revoked_reason and used as the audit action_type suffix.

Trait Implementations

impl Clone for SessionInvalidationReason

fn clone(&self) -> SessionInvalidationReason

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionInvalidationReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SessionInvalidationReason

fn eq(&self, other: &SessionInvalidationReason) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for SessionInvalidationReason

impl Eq for SessionInvalidationReason

impl StructuralPartialEq for SessionInvalidationReason